cybersecurity
training
Leverage Kaspersky Lab’s cybersecurity knowledge, experience
and intelligence through these innovative training programs.
Cybersecurity awareness and education are now critical requirements for enterprises
faced with an increasing volume of constantly evolving threats. Security employees need
to be skilled in the advanced security techniques that form a key component of effective
enterprise threat management and mitigation strategies, while all employees should have
a basic awareness of the dangers and how to work securely.
Kaspersky Lab’s Cybersecurity Training courses have been developed specifically for any
organization looking to better protect its infrastructure and intellectual property. All training
courses are offered in English.
The Courses
Level 1 - Beginner
Level 2 - Intermediate
Level 3 - Advanced
ADVANCED DIGITAL FORENSICS System Administrator advanced
skills required
ADVANCED MALWARE ANALYSIS & REVERSE ENGINEERING
Assembler skills required CORE SECuRITY
FuNDAMENTALS Basic IT knowledge
DIGITAL FORENSICS System Administrator skills
required
MALWARE ANALYSIS & REVERSE ENGINEERING
Programming skills required Employees
Line Managers
Business Managers
CYBERSAFETY CuLTuRE ASSESSMENT ONLINE TRAINING PLATFORM
CYBERSAFETY GAMES
NoN-IT awareNess IT seCurITY eduCaTIoN
PRACTICAL SECuRITY FuNDAMENTALS WITh LABS
cybersecurity
aWareness
Online interactive training modules and on-site cybersafety game training
for all employees who use computers or mobile devices at work, and those
who manage them.
Around 80% of all cyber incidents are caused by human error. Companies are spending
Millions on the cybersecurity awareness programs, but few CISOs are really satisfied with
the results. What’s wrong?
Most cybersecurity awareness training is too long, technical and essentially negative. This does not play to people’s core strengths - their decision-making principles and learning abilities - and as a result can render training ineffectual.
So organizations are seeking more sophisticated behavioral support approaches (such as corporate culture development) that deliver a quantifiable and worthwhile return on their investment in security awareness.
Kaspersky Lab Cybersecurity Awareness courses work by:
• Changing behavior – stimulating the individual’s commitment to working securely, building a corporate environment where “Everybody else cares about cybersafety, so I do, too”.
• Combining a motivational approach, gamification learning techniques, simulated attacks and in-depth interactive cybersecurity skills training.
how IT works
Comprehensive but straightforward
Training covers a wide range of security issues – from how data leaks occur to internet based malware attacks and safe social networking, through a series of simple exercises.
We use learning techniques – group dynamics, interactive modules, cartoons and gamification to make the learning process engaging.
Continuous motivation We create teachable moments - by gamification and competition, and then re-inforce these training moments throughout the year via online simulated attack exercises, assessment and training campaigns.
Changing beliefs We teach people that it is human beings, not machines, who are the primary targets of cybercriminals. We show how, through working in a more safety-conscious manner, individuals can avoid becoming victims and exposing themselves and their workplace to attack.
Building a corporate cybersafety culture
We train management to become security advocates; a culture where cybersecurity becomes second nature is best achieved through management commitment and example, and cannot simply be imposed by IT.
Positive and collaborative We demonstrate how security practices make a positive contribution to business efficiency, and promote more effective cooperation with other internal departments, including the IT Security team.
it staFF security
eDucatiOn
These courses offer a broad curriculum in cybersecurity topics and techniques
and assessment ranging from basic to expert. All are available either in-class on
customer premises or at a local or regional Kaspersky Lab office, if applicable.
Courses are designed to include both theoretical classes and hands-on ‘labs’. On completion
of each course, attendees will be invited to complete an evaluation to validate their knowledge.
BeGINNer, INTerMedIaTe or eXPerT?
The program covers everything from security fundamentals to advanced digital forensics and malware analysis, allowing organizations to improve their cybersecurity knowledge pool in three main domains:
• Fundamental knowledge of the topic • Digital Forensics and Incident Response • Malware Analysis & Reverse Engineering
serVICe BeNeFITs
LEVEL 1 – Core Security Fundamentals
Equip IT and Security Administrators and Managers with a basic understanding of the latest thinking on practical IT security measures from an industry leader. LEVEL 1 – Practical Security Fundamentals
Benefit from a in-depth understanding of security though practical exercises using modern security-related tools.
LEVELS 2-3 – Digital Forensics
Improve the expertise of your in-house digital forensics and incident response team.
LEVELS 2-3 – Malware Analysis & Reverse Engineering Improve the expertise of your in-house malware analysis and reverse engineering team.
haNds-oN eXPerIeNCe
From a leading security vendor, working and learning alongside our global experts who inspire participants through their own experience at the ‘sharp end’ of cybercrime detection and prevention.
ProGraM desCrIPTIoN
TOPICS Duration Skills gained
LeVeL 1 – Core seCurITY FuNdaMeNTaLs
• Cyberthreats & underground market overview • Spam & phishing, email security
• Fraud protection technologies
• Exploits, mobile and advanced persistent threats • Investigation basics using public web tools • Securing your workplace
2 days • Recognize security incidents and take decisions to resolve them
• Reduce the load on Information Security departments
• Increase the security level of each employer’s workplace with additional tools
• Perform simple investigations • Analyze phishing mails
TOPICS Duration Skills gained
LeVeL 1 – PraCTICaL seCurITY FuNdaMeNTaLs
• Security basics
• Open-source intelligence • Enterprise network security
• Application security & exploit prevention • DDoS attacks & banking threats
• Wireless LAN security & global mobile network • Banking & mobile threats
• Cloud and virtual environment security incident response
5 days • Provide basic investigations, using public resources, specialist search engines and social networks • Create a secure network perimeter
• Basic penetration testing skills
• Inspect traffic for different types of attack • Ensure secure software development • Identify malicious code injection
• Undertake basic malware analysis and Digital forensics
LeVeL 2 – GeNeraL dIGITaL ForeNsICs
• Introduction to Digital Forensics • Live response and evidence acquisition • Windows registry internals
• Windows artifacts analysis • Browsers forensics • Email analysis
5 days • Build a Digital Forensics lab
• Collect digital evidence and deal with it properly • Reconstruct an incident and use time stamps • Find traces of intrusion based on artifacts in
Windows OS
• Find and analyze browser and email history • Be able be apply with the tools and instruments of
digital forensics
LeVeL 2 – GeNeraL MaLware aNaLYsIs & reVerse eNGINeerING
• Malware Analysis & Reverse Engineering goals and techniques
• Windows internals, executable files, x86 assembler • Basic static analysis techniques (strings extracting,
import analysis, PE entry points at a glance, automatic unpacking, etc.)
• Basic dynamic analysis techniques (debugging, monitoring tools, traffic interception, etc.) • .NET, Visual Basic, Win64 files analysis
• Script and non-PE analysis techniques (Batch files; Autoit; Python; Jscript; JavaScript; VBS)
5 days • Build a secure environment for malware analysis: deploy sandbox and all necessary tools
• Understand principles of Windows program execution
• Unpack, debug and analyze malicious object, identify its functions
• Detect malicious sites through script malware analysis • Conduct express malware analysis
LeVeL 3 – adVaNCed dIGITaL ForeNsICs
• Deep Windows Forensics • Data recovery
• Network and cloud forensics • Memory forensics
• Timeline analysis
• Real world targeted attack forensics practice
5 days • Be able to perform deep file system analysis • Be able to recover deleted files
• Be able to analyze network traffic • Reveal malicious activities from dumps • Reconstruct the incident timeline
LeVeL 3 – adVaNCed MaLware aNaLYIsIs & reVerse eNGINeerING
• Malware Analysis & Reverse Engineering goals and techniques
• Advanced static & dynamic analysis techniques • (manual unpacking)
• Deobfuscation techniques • Rootkit & bootkit analysis
• Exploits analysis (.pdf, .doc, .swf, etc.)
• Non-Windows malware analysis (Android, Linux, Mac OS)
5 days • Use the world best practices in reverse engineering • Recognize anti-reverse engineering techniques
(obfuscation, anti-debugging)
• Apply advanced malware analysis for Rootkits/Bootkits • Analyze exploit shellcode, embedded in different file
types
• Analyze non-Windows malware
